ani-skills@1.0.1: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

ani-skills@1.0.1: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

25 flagged · loading source

bin/install.jsView file

9const os = require('os'); L10: const { execSync } = require('child_process'); L11:

High

Child Process

Package source references child process execution.

bin/install.jsView on unpkg · L9

skills/baoyu-post-to-weibo/scripts/paste-from-clipboard.tsView file

129for (let i = 0; i < retries; i++) { L130: const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', ps], { stdio: 'pipe' }); L131: if (result.status === 0) {

High

Shell

Package source references shell execution.

skills/baoyu-post-to-weibo/scripts/paste-from-clipboard.tsView on unpkg · L129

skills/brainstorming/scripts/server.jsView file

1const crypto = require('crypto'); L2: const http = require('http'); L3: const fs = require('fs'); ... L11: function computeAcceptKey(clientKey) { L12: return crypto.createHash('sha1').update(clientKey + WS_MAGIC).digest('base64'); L13: } ... L75: L76: const PORT = process.env.BRAINSTORM_PORT || (49152 + Math.floor(Math.random() * 16383)); L77: const HOST = process.env.BRAINSTORM_HOST || '127.0.0.1'; ... L98: L99: const frameTemplate = fs.readFileSync(path.join(__dirname, 'frame-template.html'), 'utf-8'); L100: const helperScript = fs.readFileSync(path.join(__dirname, 'helper.js'), 'utf-8');

Low

Weak Crypto

Package source references weak cryptographic algorithms.

skills/brainstorming/scripts/server.jsView on unpkg · L1

skills/baoyu-post-to-wechat/scripts/wechat-api.tsView file

2import path from "node:path"; L3: import { spawnSync } from "node:child_process"; L4: import { fileURLToPath } from "node:url"; ... L59: L60: const TOKEN_URL = "https://api.weixin.qq.com/cgi-bin/token"; L61: const UPLOAD_BODY_IMG_URL = "https://api.weixin.qq.com/cgi-bin/media/uploadimg"; ... L70: } L71: const data = await res.json() as AccessTokenResponse; L72: if (data.errcode) { ... L113: ? imagePath L114: : path.resolve(baseDir || process.cwd(), imagePath); L115:

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

skills/baoyu-post-to-wechat/scripts/wechat-api.tsView on unpkg · L2

skills/playwright-skill/templates/lambdatest-setup.tsView file

13* Run: L14: * npx playwright test --project=chromium # local L15: * npx playwright test --project="chrome:latest:Windows 11@lambdatest" # cloud ... L19: import { chromium } from 'playwright'; L20: import { execSync } from 'child_process'; L21:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

skills/playwright-skill/templates/lambdatest-setup.tsView on unpkg · L13

skills/planning-with-files/scripts/resolve-plan-dir.ps1View file

•path = skills/planning-with-files/scripts/resolve-plan-dir.ps1 kind = build_helper sizeBytes = 1227 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/planning-with-files/scripts/resolve-plan-dir.ps1View on unpkg

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = skills/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

skills/theme-factory/theme-showcase.pdfView file

•path = skills/theme-factory/theme-showcase.pdf kind = high_entropy_blob sizeBytes = 124310 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

skills/theme-factory/theme-showcase.pdfView on unpkg

skills/context-compression/tests/test_compression_evaluator.pyView file

•path = skills/context-compression/tests/test_compression_evaluator.py kind = payload_in_excluded_dir sizeBytes = 2095 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/context-compression/tests/test_compression_evaluator.pyView on unpkg

skills/xcuitest-skill/reference/playbook.mdView file

273patternName = generic_password severity = medium line = 273 matchedText = .login(e...rd")

Medium

Secret Pattern

Hardcoded password in skills/xcuitest-skill/reference/playbook.md

skills/xcuitest-skill/reference/playbook.mdView on unpkg · L273

skills/testcafe-skill/reference/playbook.mdView file

85patternName = generic_password severity = medium line = 85 matchedText = body: { ...' },

Medium

Secret Pattern

Hardcoded password in skills/testcafe-skill/reference/playbook.md

skills/testcafe-skill/reference/playbook.mdView on unpkg · L85

skills/karma-skill/reference/playbook.mdView file

165patternName = generic_password severity = medium line = 165 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in skills/karma-skill/reference/playbook.md

skills/karma-skill/reference/playbook.mdView on unpkg · L165

175patternName = generic_password severity = medium line = 175 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in skills/karma-skill/reference/playbook.md

skills/karma-skill/reference/playbook.mdView on unpkg · L175

skills/webdriverio-skill/reference/playbook.mdView file

412patternName = generic_password severity = medium line = 412 matchedText = body: JS... }),

Medium

Secret Pattern

Hardcoded password in skills/webdriverio-skill/reference/playbook.md

skills/webdriverio-skill/reference/playbook.mdView on unpkg · L412

skills/testunit-skill/reference/playbook.mdView file

509patternName = generic_password severity = medium line = 509 matchedText = post '/a...son,

Medium

Secret Pattern

Hardcoded password in skills/testunit-skill/reference/playbook.md

skills/testunit-skill/reference/playbook.mdView on unpkg · L509

skills/terraform-stacks/references/examples.mdView file

347patternName = generic_password severity = medium line = 347 matchedText = db_passw...-me"

Medium

Secret Pattern

Hardcoded password in skills/terraform-stacks/references/examples.md

skills/terraform-stacks/references/examples.mdView on unpkg · L347

359patternName = generic_password severity = medium line = 359 matchedText = db_passw...ger"

Medium

Secret Pattern

Hardcoded password in skills/terraform-stacks/references/examples.md

skills/terraform-stacks/references/examples.mdView on unpkg · L359

skills/jest-skill/SKILL.mdView file

126patternName = generic_password severity = medium line = 126 matchedText = email: '...23',

Medium

Secret Pattern

Hardcoded password in skills/jest-skill/SKILL.md

skills/jest-skill/SKILL.mdView on unpkg · L126

skills/codeception-skill/reference/playbook.mdView file

326patternName = generic_password severity = medium line = 326 matchedText = public f...void

Medium

Secret Pattern

Hardcoded password in skills/codeception-skill/reference/playbook.md

skills/codeception-skill/reference/playbook.mdView on unpkg · L326

skills/vitest-skill/reference/playbook.mdView file

175patternName = generic_password severity = medium line = 175 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in skills/vitest-skill/reference/playbook.md

skills/vitest-skill/reference/playbook.mdView on unpkg · L175

skills/protractor-skill/reference/playbook.mdView file

52patternName = generic_password severity = medium line = 52 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in skills/protractor-skill/reference/playbook.md

skills/protractor-skill/reference/playbook.mdView on unpkg · L52

skills/mocha-skill/reference/playbook.mdView file

332patternName = generic_password severity = medium line = 332 matchedText = .send({ ... });

Medium

Secret Pattern

Hardcoded password in skills/mocha-skill/reference/playbook.md

skills/mocha-skill/reference/playbook.mdView on unpkg · L332

skills/capybara-skill/reference/playbook.mdView file

69patternName = generic_password severity = medium line = 69 matchedText = let!(:us...') }

Medium

Secret Pattern

Hardcoded password in skills/capybara-skill/reference/playbook.md

skills/capybara-skill/reference/playbook.mdView on unpkg · L69

skills/terraform-style-guide/SECURITY.mdView file

109patternName = generic_password severity = medium line = 109 matchedText = password...t}",

Medium

Secret Pattern

Hardcoded password in skills/terraform-style-guide/SECURITY.md

skills/terraform-style-guide/SECURITY.mdView on unpkg · L109

127patternName = generic_password severity = medium line = 127 matchedText = password...t}",

Medium

Secret Pattern

Hardcoded password in skills/terraform-style-guide/SECURITY.md

skills/terraform-style-guide/SECURITY.mdView on unpkg · L127